 |
|
 |
 |
|
| Clearance |
| Minimum Security Clearance Requirement: Sensitive Compartmentalized Information (TS/SCI) |
| With a Full Scope Polygraph |
Job Location |
Geographic Location: Linthicum, Maryland 21090
|
|
Job Location: On-Site/Office
|
|
Travel Requirement: Not Specified
|
|
| To Apply |
| Apply for Job: There are two steps to apply for this job. First, click here to create a free FederalJobs.net account and post your resume. Then, click here to submit your resume to this employer. |
 |
|
| Software IA Engineer -189 |
|
Position Description
This position will be to provide the security analysis of a software product designed to operate over a network. The position will require the candidate to analyze and test source code for potential security vulnerabilities or weaknesses in information assurance guideline implementation. This position will require code analysis and network protocol analysis as well as operational scenario implementation in a closed test environment and eventually an operational environment.
The task will consist of a standard discovery phase to be followed by an evaluation phase and a reporting phase. The discovery phase will include analysis of software documentation, analysis and establishment of test environment and test plan requirements, test environment set-up, and code and network protocol implementation. The evaluation phase will implement the test plan using operational scenarios as the basis for evaluation. The result of the activity will be to develop an analysis identifying the product(s), the implementation mechanisms, potential vulnerabilities, recommendations and provide a suggested path forward.
General Requirements
The successful candidate will have a good understanding of source code analysis, software and network security engineering principles and information assurance principles.
In addition, the successful candidate will be familiar with setting up small isolated networks to reflect real-world environments and implementing test scenarios to determine security effectiveness of the software under test.
The successful candidate will have experience analyzing network application source code and analyzing network protocols for vulnerabilities.
General knowledge of multi-level security and multiple secure levels in software or data environments.
Specific Requirements
•Knowledge of techniques and practices used to corrupt software with security infiltration techniques.
•C++, Java
•Network protocol analysis (e.g. TCP/IP and UDP Networking protocols or unique protocols).
•IKE and PKI protocols.
•Software and Network analysis to include File and Network protocol fuzzing.
•Software and hardware debugging tools (GDB or JTAG)
Clearance Requirements
TS SCI/SI w/ Full Scope polygraph (mandatory)
Educational RequirementsBS in Computer Science or equivalent. Will consider qualifications against years of experience in exchange for degree from a certified educational institution.
|
The Company |
HIRING BONUS OFFERED!!!
|
Preferences |
Career Level: 5+ yrs experience
|
|
Type: Full Time Employee
|
|
Industry/Job Category: Security-Intrusion Detection
|
|
|
|
|
 |
|
 |
|
|
|
